CVE-2026-80637

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and putunalignedbe32 to safely read and write the timestamp fields. This prevents performance degradation due to unaligned memory acces...

CVE-2026-80630

In the Linux kernel, the following vulnerability has been resolved: net/sched: schfqcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever fqcodel drops packets during peek, it calls qdisctreereducebacklog. An issue arises because it calls qdisctreereducebacklog befo...

CVE-2026-80709

CVE-2026-80709 affects the Linux kernel s390/zcrypt driver. The root cause is an incorrect upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device nodes , but a wrong limit may lead to out-of-bounds heap access...

kur

kur A code simply offers the ability to kernel-mode read / write memory from user-mode using vulnerable signed driver. It's simply utilizing MmCopyVirtualMemory, which is undocumented yet one of the most common API, in kernel mode so you can read / write any user-mode memory without having to wor...

CVE-2026-80637

CVE-2026-80637 affects the Linux kernel 's netfilter synproxy subsystem. The root cause is an unaligned memory access when reading and writing TCP timestamp fields during SYN proxy operation. On architectures with strict alignment requirements (e.g., ARM, SPARC), this can cause a kernel crash ; o...

CVE-2026-80630

CVE-2026-80630 affects the Linux kernel fq_codel queueing discipline (net/sched/sch_fq_codel.c). The root cause is an ordering bug: when fq_codel drops packets during a peek operation, it calls qdisc_tree_reduce_backlog before restoring the qlen. If qlen transiently reaches zero while peek still ...

CVE-2025-7771

CVE-2025-7771 A simple PoC demonstrating the vulnerability in the ThrottleStop.sys driver, showcasing arbitrary physical memory read and write capabilities, as well as virtual-to-physical address translation using Superfetch. ⚡ Usage: 1. Register a service: Launch cmd.exe with Administrator...

qiomem

Description Arbitrary physical memory read/write using Toshiba qiomem.sys from ring 3 only works upto 4GB physical addresses. Driver is distributed via Microsoft Update Catalog. Other variants. Not listed on Microsoft Vulnerable Driver List, no previous CVE alloted. first run acpi.exe to create t...

ThrottleStopPPL

ThrottleStopPPL Uma ferramenta de prova de conceito para gerenciar níveis de proteção de Processo Protegido Leve PPL no Windows Server 2022, explorando vulnerabilidades no driver ThrottleStop CVE-2025-7771. Visão Geral Esta ferramenta demonstra escalonamento de privilégios por meio de capacidades...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

CVE-2019-16098

CVE-2019-16098 Der Treiber in Micro-Star MSI Afterburner 4.6.2.15658 auch bekannt als RTCore64.sys und RTCore32.sys erlaubt jedem authentifizierten Benutzer das Lesen und Schreiben in beliebige Speicherbereiche, I/O-Ports und MSRs. Dies kann für Privilegieneskalation, Codeausführung mit hohen...

CVE-2025-8061-Exploit

Exploit CVE-2025-8061 Panoramica Exploit proof-of-concept per LnvMSRIO.sys driver MSR I/O di Lenovo, che dimostra la lettura/scrittura arbitraria della memoria fisica e l'accesso alla memoria del kernel tramite la traduzione VA-to-PA di Superfetch. Informazioni sul driver Proprietà| Valore ---|--...

CVE-2021-3656-Demo

CVE-2021-3656: Questo problema è causato dalla mancanza di validazione del campo virtext del VMCB e consente a un guest L1 malintenzionato di disabilitare sia gli intercept di VMLOAD/VMSAVE che VLS Virtual VMLOAD/VMSAVE per il guest L2. In queste circostanze, il guest L2 è in grado di eseguire...

SIOCtl

SIOCtl Einfacher IOCTL-Dispatcher Dies ist ein generischer IOCTL-"Dispatcher". Ich habe dies erstellt, um es als POC für CVE 2018-8060 und 2018-8061 zu verwenden, aber es kann für jedes Gerät, jeden IOCTL und beliebige Daten verwendet werden. Eingabedaten sind eine Binärdatei, die Rohdaten enthäl...

cheat-engine-undetectable

Cheat Engine Indistinguibile Edizione per Ricerca Accademica — Cheat Engine modificato con evasione anti-cheat a più livelli per educazione alla cybersecurity e ricerca universitaria di reverse engineering. Disclaimer: Questo progetto è esclusivamente per ricerca accademica, corsi universitari ed...

CVE-2018-19321

CVE-2018-19321 CVE-2018-19321 Descrizione I driver di basso livello GPCIDrv e GDrv in GIGABYTE APP Center v1.05.21 e versioni precedenti, AORUS GRAPHICS ENGINE prima della 1.57, XTREME GAMING ENGINE prima della 1.26 e OC GURU II v2.08 espongono funzionalità per leggere e scrivere memoria fisica...

cve-2026-29923

CVE-2026-29923 — pstrip64.sys Escalation dei Privilegi Locale Una proof-of-concept minimale per CVE-2026-29923, una vulnerabilità nel driver del kernel pstrip64.sys EnTech Taiwan PowerStrip ≤ 3.90.736 che consente a un processo in modalità utente non privilegiato di elevarsi a NT AUTHORITY\SYSTEM...

cve-2025-7771

CVE-2025-7771 — LPE di ThrottleStop.sys Proof-of-concept per CVE-2025-7771. ThrottleStop.sys espone due gestori IOCTL che consentono lettura/scrittura arbitraria della memoria fisica senza alcun controllo degli accessi — qualsiasi processo amministrativo può leggere o scrivere ovunque nella RAM...

CVE-2025-49844

🚨 CVE-2025-49844 RediShell - Guida Completa ⚠️ Solo per Imparare, Non per Hackerare ; ⚠️ Ehi! Questo è un semplice strumento che ho creato per aiutare le persone a verificare se i loro server Redis sono vulnerabili a questo bug. Non è pensato per attacchi reali - solo per imparare e proteggere le...

Centry

Centry चेतावनी: यह प्रायोगिक सॉफ्टवेयर है। इसमें बग होने की संभावना है। अपडेट्स यदि आपने पहले ही Centry स्थापित कर लिया है, तो नवीनतम संस्करण में अपडेट करने के लिए कृपया git pull चलाएँ। नवीनतम अपडेट इसे रीप्ले हमलों replay attacks के विरुद्ध अधिक सुरक्षित बनाते हैं। परिचय Centry एक पैनिक बटन है...